CloudQuery News

Security

Introducing the Zoom Source Integration

Introducing the Zoom Source Integration

TL;DR

The new CloudQuery Zoom Source Integration syncs your Zoom workspace data - users, roles, groups, and group admins - into any supported destination. This makes it possible to run SQL queries for least-privilege reviews, identify elevated permissions, and cross-reference Zoom accounts against identity providers like Okta.

Zoom has become a staple for remote collaboration, but managing user access and permissions across a growing workspace can get messy. Who has admin privileges? Are there accounts that should have been deprovisioned? The answers usually require clicking through the Zoom admin console one user at a time.

The new Zoom Source Integration changes that. You can now sync Zoom workspace data into PostgreSQL, Snowflake, BigQuery, or any other destination supported by CloudQuery and query it with SQL.

What Does the Zoom Integration Sync?

The integration pulls data from the Zoom API for the following resources:

  • Users into the zoom_users table
  • Roles into the zoom_roles table
  • Role memberships into the zoom_role_members table
  • Groups into the zoom_groups table
  • Group admins into the zoom_group_admins table

This gives you the raw material for access audits, compliance checks, and cross-platform identity reconciliation.

Security and Governance Use Cases

Here's where it gets useful. Once your Zoom data is in a SQL-queryable format, you can answer questions that would otherwise require manual investigation.

Find All Users and Their Zoom Roles

For least-privilege reviews, you need to know who has elevated permissions. This query joins users with their assigned roles:

SELECT
u.id AS user_id,
u.email,
r.id AS role_id,
r.name AS role_name
FROM zoom_role_members rm
JOIN zoom_users u ON u.id = rm.user_id
JOIN zoom_roles r ON r.id = rm.role_id
ORDER BY u.email, r.name;

The output shows every user alongside the roles they've been assigned. If someone has an "Admin" or "Owner" role who shouldn't, you'll spot it here.

Identify Group Administrators

Group admins can manage members within their assigned groups - a permission that's easy to hand out and forget about. This query surfaces all group admin assignments:

SELECT
u.id AS user_id,
u.email,
g.id AS group_id,
g.name AS group_name
FROM zoom_group_admins ga
JOIN zoom_users u ON u.id = ga.user_id
JOIN zoom_groups g ON g.id = ga.group_id
ORDER BY u.email, g.name;

Cross-Reference Zoom Users Against Okta

If you're also using the Okta Source Integration, you can find Zoom accounts that don't have a corresponding Okta identity. These are often former employees, contractors whose access wasn't revoked, or shadow accounts:

SELECT
u.id AS user_id,
u.email
FROM zoom_users u
LEFT JOIN okta_users o
ON LOWER(o.profile->>'email') = LOWER(u.email)
WHERE o.id IS NULL
ORDER BY u.email;

This query returns Zoom users with no matching Okta account - a good starting point for cleanup.

Getting Started

To start syncing Zoom data, see the Zoom Source Integration documentation for authentication setup and configuration examples.

If you're new to CloudQuery, download CloudQuery to get started, or check out the quick start guide.

Frequently Asked Questions

What Data Does the Zoom Integration Sync?

The integration syncs users, roles, role memberships, groups, and group administrators from your Zoom workspace.

How Do I Authenticate the Zoom Integration?

The integration uses Zoom's Server-to-Server OAuth authentication. You'll need to create a Server-to-Server OAuth app in the Zoom App Marketplace and provide the credentials in your CloudQuery configuration file.

Can I Query Zoom Meeting Data?

The current release focuses on user and access management data. Meeting data may be added in future releases based on community feedback.

How Can I Find Users with Elevated Zoom Permissions?

Join the zoom_role_members table with zoom_users and zoom_roles to see which users have been assigned administrative or privileged roles.

Can I Cross-Reference Zoom Users with Other Identity Providers?

Yes. CloudQuery supports syncing from multiple sources to the same destination. You can join Zoom data with Okta, Azure AD, Google Workspace, or other identity provider integrations to find orphaned accounts or permission mismatches.

What Destinations Can I Sync Zoom Data To?

Any destination supported by CloudQuery, including PostgreSQL, Snowflake, BigQuery, ClickHouse, S3, and more. See the full list of destination integrations.


Questions or feedback? Join the CloudQuery Community.

Try CloudQuery yourself

Self-hosted, open source, and free to start. Or schedule a demo to see the managed version.

Related posts

CloudQuery News

Product News

Security

Introducing Data Access Control for CloudQuery Platform

CloudQuery Platform RBAC: Control cloud asset access with SQL-based permissions. Map Azure AD/Okta groups to roles. Available now on all environments.

Joe Karlsson

Joe Karlsson

October 28, 2025

AWS

Azure

GCP

Security

How Do You Run CloudQuery Without Static Credentials?

Workload identity federation for GCP and Azure, RDS IAM auth, and Lakebase OAuth let self-hosted CloudQuery syncs run without stored static credentials.

Ben Bernays

Ben Bernays

September 28, 2026

AWS

Security

Tutorials

Finding AWS Unrestricted Outbound Access in 2026: EC2, Lambda, and Beyond

Find EC2, Lambda, and ECS Fargate resources with unrestricted outbound access in AWS using SQL. Why egress controls still break attack chains in 2026.

Joe Karlsson

Joe Karlsson

May 5, 2026

AWS

Security

Tutorials

AWS IAM Identity Center with Google Workspace as an IdP: 2026 Step-by-Step Guide

Set up AWS IAM Identity Center with Google Workspace: SAML authentication, SCIM user provisioning, and group sync with CLI or ssosync. Updated for 2026.

Joe Karlsson

Joe Karlsson

May 5, 2026

GCP

Security

Tutorials

Creating Cross-Project Service Accounts in GCP (Console + gcloud CLI)

Create a GCP service account that reads across all your projects with one credential. Covers gcloud CLI, org-level vs.

Joe Karlsson

Joe Karlsson

May 5, 2026

AWS

Best Practices

Security

AWS CIS Benchmark in 2026: Automated Compliance with SQL-Based Policies

AWS CIS Benchmark hit v3.0 in 2024 with 40+ controls. Run automated compliance checks using SQL policies with exception management and multi-account views.

Joe Karlsson

Joe Karlsson

May 5, 2026

CloudQuery News

Introducing CloudQuery Insights: Cloud Intelligence That Connects the Dots

CloudQuery Insights automatically surfaces connected signals across your cloud inventory: security findings, cost data, policy violations, and audit trails.

Joe Karlsson

Joe Karlsson

April 21, 2026

AWS

Cloud Infrastructure

Security

Tutorials

Integrate AbuseIPDB Threat Intelligence with CloudQuery

Enrich your cloud asset inventory with AbuseIPDB threat intelligence to identify public cloud IPs with known abuse reports.

Joe Karlsson

Joe Karlsson

April 20, 2026

AWS

Security

Tutorials

AWS IAM Identity Center (Formerly AWS SSO): The Complete 2026 Guide

AWS IAM Identity Center replaced AWS SSO in 2022. Learn how to set it up, configure permission sets, use the AWS CLI, and audit access with CloudQuery.

Joe Karlsson

Joe Karlsson

April 6, 2026

Own your pipeline.
Own your data.